CVE-2024-32530: WordPress Simple Testimonials Showcase plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PressTigers Simple Testimonials Showcase allows Stored XSS.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32530?
The severity of CVE-2024-32530 is considered critical due to its potential for Stored Cross-Site Scripting (XSS).
How do I fix CVE-2024-32530?
To fix CVE-2024-32530, it is recommended to update the Simple Testimonials Showcase plugin to version 1.1.6 or later if available.
What systems are affected by CVE-2024-32530?
CVE-2024-32530 affects the Simple Testimonials Showcase plugin versions up to and including 1.1.5.
What type of attack does CVE-2024-32530 enable?
CVE-2024-32530 enables Stored Cross-Site Scripting (XSS) attacks, allowing an attacker to inject malicious scripts into web pages.
Who is the vendor for the software affected by CVE-2024-32530?
The vendor for the software affected by CVE-2024-32530 is PressTigers.